← Back to glossary

Minimize permissions to reduce attack surface.

Definition

PoLP is a security principle that limits identities and processes to the minimum permissions and scope needed, reducing exposure to misuse and escalation.

In plain English Minimize permissions to reduce attack surface.

Why this matters

Why it matters: It reduces lateral movement and limits impact of compromised credentials or software flaws.

Example

Example: Restricting service accounts to only required database tables and operations.